Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wgde9jv2Uv29Ba9hdD4bwpOWovc.cer
File: wgde9jv2Uv29Ba9hdD4bwpOWovc.cer (raw, json)
Hash identifier: Yd+drGob1VSvfODqSkxiI+uJm7Mc9rSZyEvrTOIcrFk=
Subject key identifier: C2:07:5E:F6:3B:F6:52:FD:BD:05:AF:61:74:3E:1B:C2:93:96:A2:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAC7B2AB1342B1763E28B3BEF570F4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/30ad34-874e-4b62-a96f-988d6ae0c69b/1/wgde9jv2Uv29Ba9hdD4bwpOWovc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/30ad34-874e-4b62-a96f-988d6ae0c69b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.243.0/24
IP: 2a11:8540::/29
Validation: Failed, certificate revoked on Tue 10 Oct 2023 05:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ac:7b:2a:b1:34:2b:17:63:e2:8b:3b:ef:57:0f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2075ef63bf652fdbd05af61743e1bc29396a2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:f3:ee:bc:99:d5:6d:1e:d0:99:53:88:ac:
76:08:ae:5c:07:1a:34:d9:ff:95:bc:52:3d:e7:81:
e7:5c:0f:d4:f5:37:0b:2b:ce:16:36:7a:8a:87:fd:
9d:fc:94:67:0f:3a:6f:d4:de:b1:c8:00:3f:e3:90:
2a:0b:81:45:5b:58:b9:dc:ed:ef:f3:cf:a1:fe:f4:
f5:57:df:91:24:e9:7c:8e:8f:c3:44:24:81:ef:6a:
2c:f8:92:31:bd:f7:74:32:60:54:41:7a:9a:c0:16:
35:c5:f0:bb:cb:6e:f1:18:92:6f:10:72:7a:4a:12:
45:48:02:81:0b:40:fd:89:a9:72:ba:1c:29:13:40:
0e:c3:99:66:c2:fa:19:ff:0a:6d:7d:bf:1f:50:8b:
59:df:60:d4:75:b9:5e:90:26:14:6e:1a:6c:11:e9:
d9:ff:ef:3d:2b:8e:c6:48:20:62:a2:7d:fe:9e:28:
ff:f8:68:38:92:81:d0:65:17:29:24:71:62:d6:5e:
96:1d:82:00:7b:50:f8:04:dd:85:ef:70:1b:3b:80:
15:d9:d0:9e:cb:be:f2:35:d1:28:a3:1f:55:33:c5:
e6:58:b6:ec:c6:43:9e:c9:17:ef:9b:50:32:9d:76:
c0:56:8f:78:65:53:45:c0:32:a2:71:14:ca:2e:16:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:07:5E:F6:3B:F6:52:FD:BD:05:AF:61:74:3E:1B:C2:93:96:A2:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/30ad34-874e-4b62-a96f-988d6ae0c69b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/30ad34-874e-4b62-a96f-988d6ae0c69b/1/wgde9jv2Uv29Ba9hdD4bwpOWovc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.243.0/24
IPv6:
2a11:8540::/29
Signature Algorithm: sha256WithRSAEncryption
97:31:50:2c:82:07:9c:e8:e7:37:fa:83:d0:43:4a:af:67:3d:
30:02:07:45:d6:63:fd:77:66:25:cd:d8:8e:1b:8d:f5:d4:65:
3d:50:70:75:17:29:1e:44:3a:d9:bb:2d:f9:fe:ab:ce:24:4a:
e1:0a:09:75:04:37:7f:fc:2f:d7:cf:ed:bd:93:a1:b6:d6:0e:
56:bf:68:48:bf:65:08:a3:38:33:9e:14:50:de:a1:e2:28:bf:
80:62:c4:60:ed:9c:bc:ee:a6:51:33:b6:8b:2c:8c:30:29:d8:
d2:c3:9d:c9:54:84:fa:aa:e0:ce:e8:82:44:b0:c3:d3:c1:97:
2c:3d:a6:ef:cb:93:80:e6:5f:e4:0e:9f:0b:f9:ba:53:99:70:
d8:e7:ef:a9:32:cf:f5:8a:53:d8:4c:2d:d5:c1:08:e3:ff:24:
77:eb:64:6b:eb:6e:2a:95:59:0c:f6:99:17:67:6c:3c:1a:c4:
95:e9:eb:30:84:c0:7d:ea:21:57:65:4b:59:4c:e2:cd:ca:03:
c9:70:6e:3f:13:85:60:b7:59:0b:3f:4e:10:c5:4c:fa:ac:88:
db:5b:82:35:5a:a7:b6:8a:6d:61:56:90:79:e2:23:41:58:e3:
09:ca:e0:8e:e7:bd:b6:1e:a1:36:4f:cd:76:fc:ec:f0:8d:25:
25:cb:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:50 2024 by rpki-client on console-ams.rpki-client.org